Defender for Endpoint: Can be onboarded

Question

I installed Microsoft Defender for Endpoint on multiple machines with use of Azure arc

Some of the machines have the Status "can be onboarded".

Some have the status "onboarded".

Why is that?

Answer 1

Hi @Monisha P,

Welcome to Microsoft Q&A Forum, thank you for posting your query here!

The status "can be onboarded" indicates that those machines are eligible for onboarding to Microsoft Defender for Endpoint but have not yet completed the process. This could be due to various reasons such as configuration issues, lack of necessary permissions, or the devices not being enrolled in the required management systems.

On the other hand, machines with the status "onboarded" have successfully completed the onboarding process and are now being monitored and managed by Microsoft Defender for Endpoint.

To resolve issues with machines that can be onboarded, you may want to check the configuration status and ensure that all prerequisites for onboarding are met.

https://learn.microsoft.com/en-us/defender-endpoint/configure-machines-onboarding

https://learn.microsoft.com/en-us/azure/defender-for-cloud/endpoint-detection-response-solution-recommendations#prerequisites

Let me know if you need further clarification or assistance!

Feel free to reach out if you have any further questions or need additional information—I’m happy to assist!

Please provide your valuable comments

Please do not forget to "Accept the answer” and “upvote it” wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.